Ask the Experts - Cloud Data Protection - Best Practices for Backup and Disaster
Explore best practices for cloud data protection, focusing on backup strategies and disaster recovery for Microsoft 365 to ensure business continuity and data security.
How Docker Containers Can Be Used to Spawn Onion Services
Learn to securely spawn Tor onion services using Docker containers, exploring encryption, network architecture, and practical implementation techniques.
Securing Linux VM Boot with AMD SEV Measurement
Explore AMD SEV measurement for securing Linux VM boot, covering vulnerabilities, solutions, and future plans in confidential computing environments.
Intelligence Led Penetration Testing
Explore intelligence-led penetration testing using threat intel and OSINT to create bespoke, realistic assessments that mimic real-world attack techniques and toolkits.
Elliptic Curve Cryptography for Those Who Are Afraid of Maths
Demystifying Elliptic Curve Cryptography: Learn the basics, understand its importance in data protection, and grasp the concept of point addition on curves for secure key exchange without delving into complex mathematics.
Practical Crypto Attacks Against Web Applications
Explore practical crypto attacks on web apps, covering ECB and CBC modes, block swapping, padding oracles, and signed cookies. Gain insights into vulnerabilities and defense strategies.
Breaking Binary Protocols and Bad Crypto
Explore reverse-engineering techniques for binary protocols and cryptography, focusing on methodologies to uncover vulnerabilities in network devices through real-world examples.
Random Problems in IoT
Explore IoT device security vulnerabilities related to random number generation, their impact on cryptography, and potential solutions for embedded systems.
Truly Anonymous Credentials Using Modern Cryptography
Explore anonymous authentication using linkable ring signatures, enabling spam prevention without compromising user privacy. Learn cryptographic principles and see a demo of an anti-spam anonymous forum on Tor/I2P.
Reducing Mixtape to Master Key Scenarios - How to Block the Dark Army from Mayhem Using API-Driven Access Control
Discover API-driven access control strategies to enhance security by eliminating "master keys" and implementing temporary, context-based privileged access in your infrastructure.
Elliptic Curve Cryptography for Those Who Are Afraid of Math
Demystifying Elliptic Curve Cryptography: Learn the basics, understand its applications, and grasp the importance of ECC expertise without delving into complex mathematics.
How to Break PDF Encryption
Learn techniques to break PDF encryption, analyze vulnerabilities, and understand the structure of encrypted documents for enhanced security awareness.
Redesigning PKI to Solve Revocation, Expiration, and Rotation Problems
Explore PKI redesign for IoT security, addressing key revocation, expiration, and rotation challenges. Learn from real-world experiences and discover innovative solutions for robust device management.
Say It Ain’t So - An Implementation of Deniable Encryption
Explore deniable encryption techniques, their applications, and implementation, focusing on set and string reconciliation methods for secure communication.
Return of the Insecure Brazilian Voting Machines
Análise detalhada da segurança do software de votação brasileiro, baseada em resultados de um desafio de hacking restrito organizado pela autoridade eleitoral nacional.
When Everyone's Dog is Named Fluffy - Abusing the Brand New Security Questions in Windows to Gain Domain-Wide Persistence
Explore Windows 10 security questions vulnerability, offering insights on exploiting this feature for persistent access and domain-wide compromise.
Screaming Channels - When Electromagnetic Side Channels Meet Radio Transceivers
Novel side-channel attacks on mixed-design chips exploiting electromagnetic leaks in radio signals, potentially breaking cryptography over large distances. Explores discovery, impact, and countermeasures.
XOM-Switch - Hiding Your Code from Advanced Code Reuse Attacks in One Shot
Discover XOM-switch, a security tool enabling XOM on Linux applications using PKU. Learn about its end-to-end approach for protecting deployed apps without source code or heavy binary rewriting.
When Good Turns Evil - Using Intel SGX to Stealthily Steal Bitcoins
Explore how Intel SGX can be exploited to implement stealthy malware, extract secret RSA keys, and steal Bitcoins through cache attacks and other vulnerabilities in trusted execution environments.
Kr00k - How KRACKing Amazon Echo Exposed a Billion+ Vulnerable Wi-Fi Devices
Discover critical Wi-Fi security vulnerabilities affecting billions of devices, including Amazon Echo. Learn about Kr00k, its impact, and see a live demonstration of the exploit.
Multiple Bugs in Multi-Party Computation - Breaking Cryptocurrency's Strongest Wallets
Explore vulnerabilities in advanced cryptographic methods for cryptocurrency wallets, focusing on multi-party computation and threshold signature schemes. Learn about potential attacks and security considerations.